Contact

General enquiry

Questions about our tools, research, training or commercial services.

Vulnerability disclosure

Report a vulnerability in our systems. Please give us reasonable time to investigate and fix before publishing.

Research collaboration

Joint research proposals, paper co-authorship and guest contributor enquiries.

Training & enterprise

Enterprise training, team subscriptions, custom courseware and group pricing.

Response times

This is a small, independent operation — we read every message but can’t guarantee fixed response-time SLAs. We aim to reply as promptly as we can, with vulnerability reports prioritised.

Reporting a vulnerability

Our machine-readable policy lives at /.well-known/security.txt. Include the affected URL, reproduction steps and impact. We don’t currently run a paid bounty programme, and we won’t pursue researchers acting in good faith.